Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
File:                     F00A66308A9C11EB9B2E044BC4F9AE02.roa (raw, json)
Hash identifier:          Q7swCwzo9hJZ24gi07aIuTosZazuiPIGE4MruPYbUYg=
Subject key identifier:   FC:B6:64:83:D0:9A:29:3B:11:72:23:4C:23:5A:E8:F7:5E:17:D0:E7
Certificate issuer:       /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial:       0756
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
Signing time:             Tue 14 Jul 2026 22:23:44 +0000
ROA not before:           Tue 14 Jul 2026 22:23:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        155.205.200.0/24 maxlen: 24
                          155.205.208.0/24 maxlen: 24
                          155.205.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
        Validity
            Not Before: Jul 14 22:23:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56b6f0-d65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:37:cd:65:c9:60:56:8b:1a:3e:22:48:be:
                    75:6b:e3:d8:65:32:91:9f:7b:2d:54:0e:cd:94:6c:
                    33:66:4a:8c:6b:a1:7a:80:3a:87:67:09:7f:56:81:
                    d6:0d:b4:49:d3:6b:11:2f:fd:11:de:97:14:05:02:
                    0b:00:3e:5c:cb:5c:5c:b8:bf:9d:44:ca:86:32:e6:
                    c1:6f:3f:5c:76:e1:12:cb:74:b3:74:12:4a:21:88:
                    b4:6e:6a:0a:97:a2:8d:d1:4d:c1:a0:e0:6f:1e:d3:
                    87:3d:38:28:9e:d9:af:83:2f:d6:fc:98:cd:67:1a:
                    25:76:0a:e8:66:6a:84:01:ed:e2:e8:28:68:86:ff:
                    55:84:1a:9d:43:4c:fe:92:4c:96:d6:41:c4:b7:ab:
                    11:5e:d1:63:f1:52:dc:be:f3:49:7c:d1:4a:ee:e3:
                    03:47:22:95:70:d7:7b:30:01:3e:06:d1:56:d6:43:
                    0f:2f:4e:09:0d:d8:24:ce:46:3e:6a:60:e2:a0:84:
                    e8:52:ba:4d:2d:4d:4d:e3:54:7a:2c:94:c1:19:cc:
                    a2:09:6b:54:6a:63:f5:36:13:d3:74:3d:74:c8:4d:
                    a7:a7:38:61:ac:da:63:b8:52:02:99:05:bb:6a:ec:
                    8f:94:62:af:15:0e:a0:68:42:29:e1:f5:1b:94:0d:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:64:83:D0:9A:29:3B:11:72:23:4C:23:5A:E8:F7:5E:17:D0:E7
            X509v3 Authority Key Identifier:
                keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.205.200.0/24
                  155.205.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:79:9a:d1:3d:be:51:c4:ab:f8:7b:7c:a4:ad:2f:62:47:64:
         e5:ca:fc:cc:43:9c:8b:36:f5:3a:1b:9f:30:c8:44:98:a8:22:
         1c:10:ce:d4:f7:8a:01:bf:4b:90:90:4c:d7:a3:30:cf:d1:49:
         1f:12:3f:9f:44:a6:a1:61:bb:9b:ec:b3:38:50:81:e7:d8:2e:
         07:db:f5:5e:f0:8f:7f:0a:62:f2:89:23:2e:0a:31:89:c3:db:
         99:50:c0:52:72:33:75:0c:e4:42:c1:b7:92:13:46:23:9f:ff:
         2c:78:b5:4e:13:86:f1:2e:d5:92:03:fc:48:75:03:e7:d0:6a:
         07:8b:bb:ae:bd:d3:a2:20:82:1a:c7:38:a4:58:96:b0:e2:3e:
         30:f7:a8:c8:d4:24:c0:37:66:25:55:99:12:cf:7d:92:7d:f9:
         3d:78:5b:84:dd:c6:76:1c:96:c5:da:7a:cc:af:29:f0:81:85:
         b5:f6:88:71:19:96:ca:2f:cd:f6:14:b4:b8:82:6c:48:90:ae:
         bd:fc:53:62:0e:b4:57:92:84:6b:4f:ef:1c:20:fd:ae:c0:e8:
         52:13:75:d0:60:53:ce:e2:5e:10:11:cd:f4:9c:a0:98:c7:c8:
         a8:26:46:38:05:5d:ca:15:76:eb:d8:69:03:01:6f:f4:01:c0:
         4c:1b:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:54 2026 by rpki-client